JetBrains (Rider, IntelliJ, ...)
The AlertaVuln plugin for JetBrains IDEs - Rider, IntelliJ IDEA, PyCharm, GoLand, WebStorm, and the rest of the family - shows REDYELLOWGREEN findings on the lines they affect, matched to your AlertaVuln project.
What it shows
Section titled “What it shows”- Dependency and code-scan findings on the lines they affect - a full-line colour wash in the finding’s severity tier, a gutter icon, and the reasoning on hover.
- A Dash tool window that lists every finding as a card grouped by type; click a card to jump straight to the code (with a brief highlight so you can see where it landed).
- A status-bar widget showing the RED / YELLOW / GREEN counts; click it to focus the Dash.
GREEN findings are hidden by default.
Sign in
Section titled “Sign in”Run AlertaVuln: Sign in (command palette or the AlertaVuln action). Your browser opens to AlertaVuln; authenticate with your existing login (Entra, Google, or email) and the IDE is signed in over a secure callback - there is no key to copy or paste. The token is stored in the IDE’s PasswordSafe.
The plugin matches your open project to a connected repository in AlertaVuln by its git remote automatically; for monorepos or unusual remotes, set the project id in the plugin settings.
Settings
Section titled “Settings”- API host - defaults to
https://alertavuln.com. Point it at a self-hosted or staging host with theALERTAVULN_API_URLenvironment variable (read at IDE launch) or in the plugin settings. Unset, it stays onalertavuln.com. - Visuals, show green, and the refresh interval mirror the VS Code options.
Compared with VS Code
Section titled “Compared with VS Code”The JetBrains plugin is a findings viewer today: sign-in, inline RYG findings, the Dash tool window, and jump-to-code. The one-click dependency fixes, the bring-your-own-AI remediation handoff, and the local-CLI scan + “Fixed locally” verification ship in the VS Code extension now and are on the roadmap for JetBrains.
See also
Section titled “See also”- VS Code extension - the full fix + verify experience
- MCP server - connect editor AI agents to AlertaVuln directly